Is this what you’re trying to do? // WP_Query arguments $args = array ( ‘post_type’ => array( ‘project’ ), ‘meta_query’ => array( array( ‘key’ => ‘meta_key’, ‘value’ => ‘%$query%’, ), ), ); // The Query $query = new WP_Query( $args );
WordPress is fetching current post for you, you have to only type to the right url. When you get e.g. to example.com/lorem-ipsum/ WordPress will load automatically post with title Lorem ipsum and display it using page.php template. Your page.php template should be looking something like that. <?php get_header(); ?> <div id=”content”> <?php while ( have_posts() … Read more
Is it possible to change the post IDs within the wp_posts table without causing problems? No it is not. If you change a posts ID, you then have to go through and fix other things: the post meta key/value pairs would no longer have the correct ID All terms in taxonomies such as categories and … Read more
You shouldn’t change serialised PHP data structures directly. Serialised data contains the length of each value, and by changing a section of text, that length is no longer correct, and PHP runs into a fatal error and crashes. I don’t know what you are doing, but you should not modify serialised PHP strings manually.
how real is this security problem? You shouldn’t be concerned by this unless you’re retrieving user agents and making raw SQL queries. I recommend you avoid both of those, but for unrelated reasons. If you are piping raw user agents into raw SQL queries, and you would know if you were doing this as it’s … Read more
All you need to do is modify the SQL query. Using the code you linked as a base: $numposts = $wpdb->get_var(“SELECT COUNT(*) FROM $wpdb->posts WHERE post_status=”publish” AND year(post_date) = 2010″); if (0 < $numposts) $numposts = number_format($numposts); The ‘AND’ I added basically gives you all the posts of 2010. Change the year accordingly
I would use a custom query like this: $amsterdamstore_args = array( ‘post_type’ => ‘store’, // This is your custom post type ‘tax_query’ => array( array( ‘taxonomy’ => ‘city’, // This is your custom taxonomy ‘terms’ => ‘Amsterdam’, // The term you search for ‘field’ => ‘name’, // Check against the term’s name (you might use … Read more
You might be a little confused as to the purpose and function of nonces in WordPress. Recommended reading: WordPress Nonces An Introduction to WordPress Nonces with Examples Protect_Queries_Against_SQL_Injection_Attacks A nonce is a “number used once” to help protect URLs and forms from certain types of misuse, malicious or otherwise. Nonces help you ensure, somewhat, the … Read more
You might try adding a second meta_query that would look for anything without the meta key: $args = array( ‘post_type’ => ‘agenda’, ‘paged’ => $paged, ‘meta_query’ => array( ‘relation’ => ‘OR’, array( ‘key’ => ‘datum_event’, ‘value’ => date(‘Ymd’), ‘compare’ => ‘<=’ ), array( ‘key’ => ‘datum_event’, ‘meta_compare’ => ‘NOT_EXISTS’, ‘value’ => ‘placeholder’ ), ), ); … Read more
I can’t find a function shipped with WordPress that does this, so I created my own: function esc_sql_name( $name ) { return str_replace( “`”, ““”, $name ); } You can use it like this: $escaped_name = esc_sql_name( $column_name ); $sql = $wpdb->prepare( “SELECT * FROM example WHERE `$escaped_name` = %s”, $foobar ); Reference: MySQL documentation … Read more